{"id":"W4388197345","doi":"10.1145/3630253","title":"On Detecting and Measuring Exploitable JavaScript Functions in Real-world Applications","year":2023,"lang":"en","type":"article","venue":"ACM Transactions on Privacy and Security","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":8,"is_retracted":false,"has_abstract":true,"ca_institutions":"Concordia University","funders":"","keywords":"JavaScript; Unobtrusive JavaScript; Computer science; Vulnerability (computing); Computer security; Web application; Exploit; Source code; Rich Internet application; World Wide Web; Programming language","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.002089568,0.001556939,0.0007099041,0.008343792,0.0005964197,0.001054385,0.001165408,0.001509983,0.0002134829],"category_scores_gemma":[0.01090322,0.0004047609,0.001018131,0.00477673,0.0007181314,0.002197526,0.001548948,0.0009091833,0.0005342478],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0006757321,"about_ca_system_score_gemma":0.0008053593,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.007445158,"about_ca_topic_score_gemma":0.01099903,"domain_scores_codex":[0.9954513,0.0007081484,0.0005056889,0.001483412,0.001507923,0.0003436729],"domain_scores_gemma":[0.9922388,0.003568011,0.001801952,0.001101508,0.0009509026,0.0003388167],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"observational","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0008118229,0.001231604,0.6095497,0.001890137,0.0007463879,0.001763177,0.0009925319,0.07653676,0.03185299,0.001698463,0.02042706,0.2524995],"study_design_scores_gemma":[0.00006603955,0.0006367588,0.5328965,0.0002660679,0.0002389053,0.002365873,0.0008977375,0.4179695,0.02774334,0.003219798,0.01356151,0.0001378658],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.9486037,0.004213104,0.02800967,0.0002780719,0.00009144843,0.0001625317,0.01268336,0.004270143,0.001687908],"genre_scores_gemma":[0.9170429,0.001227606,0.04102138,0.0001644535,0.00006424963,0.000170059,0.03940118,0.0001874625,0.0007207244],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.008343792,"threshold_uncertainty_score":0.01480365,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.04782383807613454,"score_gpt":0.2753988203095273,"score_spread":0.2275749822333928,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}